WPVibes
- Total products in the ecosystem
- 8
- Total vulnerabilities (90 days)
- 8
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, WPVibes recorded 8 security vulnerabilities in the last 90 days across 3 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, AnyWhere Elementor had the most security vulnerabilities in the WPVibes ecosystem, with 4 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-114189WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerabilityCVE-2026-114188WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-114186WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityCVE-2026-119467WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityCVE-2026-119465WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-114189WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes |
| Published11/08/2026 |
| SeverityHigh |
CVE-2026-114188WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productAnyWhere Elementor | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-114186WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productAnyWhere Elementor | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-119467WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productAnyWhere Elementor | Published11/07/2026 | SeverityMedium |
|---|
CVE-2026-119465WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementor Addon Elements | Published11/07/2026 | SeverityMedium |
|---|
CVE-2026-103914Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter | Exploitation statusNot confirmed | FixYes | Affected productDynific Addons for Elementor (formerly Anywhere Elementor) | Published11/07/2026 | SeverityMedium |
|---|
CVE-2026-102564Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer | Exploitation statusNot confirmed | FixYes | Affected productDynific Addons for Elementor (formerly Anywhere Elementor) | Published11/07/2026 | SeverityMedium |
|---|
CVE-2026-114187WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productAnyWhere Elementor | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-114185WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productAnyWhere Elementor | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-114183WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability | Exploitation statusNot confirmed | FixYes | Affected productAnyWhere Elementor | Published11/03/2026 | SeverityMedium |
|---|
CVE-2026-114184WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementor Addon Elements | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-61947WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productForm Vibes – Database Manager for Forms | Published07/23/2026 | SeverityHigh |
|---|
CVE-2026-13378Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field | Exploitation statusNot exploited | FixYes | Affected productForm Vibes – Save Contact Form 7 & Elementor Form Entries to Database | Published07/11/2026 | SeverityHigh |
|---|
CVE-2023-33999WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP Mail Log | Published06/11/2026 | SeverityHigh |
|---|
CVE-2026-28131WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementor Addon Elements | Published02/26/2026 | SeverityMedium |
|---|
CVE-2025-13409Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection | Exploitation statusNot exploited | FixYes | Affected productForm Vibes – Database Manager for Forms | Published01/06/2026 | SeverityMedium |
|---|
CVE-2025-31046WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability | Exploitation statusNot exploited | FixYes | Affected productAnyWhere Elementor Pro | Published01/05/2026 | SeverityMedium |
|---|
CVE-2025-12537Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productAddon Elements for Elementor (formerly Elementor Addon Elements) | Published12/14/2025 | SeverityMedium |
|---|
CVE-2024-13215Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup | Exploitation statusNot exploited | FixYes | Affected productAddon Elements for Elementor (formerly Elementor Addon Elements) | Published01/15/2025 | SeverityMedium |
|---|
CVE-2024-10777AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure | Exploitation statusNot exploited | FixYes | Affected productDynific Addons for Elementor (formerly Anywhere Elementor) | Published12/05/2024 | SeverityMedium |
|---|
CVE-2024-47361WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementor Addon Elements | Published11/01/2024 | SeverityMedium |
|---|
CVE-2024-8902Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections | Exploitation statusNot exploited | FixYes | Affected productAddon Elements for Elementor (formerly Elementor Addon Elements) | Published10/12/2024 | SeverityMedium |
|---|
CVE-2024-47366WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementor Addon Elements | Published10/06/2024 | SeverityMedium |
|---|
CVE-2024-5309Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions | Exploitation statusNot exploited | FixYes | Affected productForm Vibes – Database Manager for Forms | Published09/05/2024 | SeverityMedium |
|---|
CVE-2024-7122Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets | Exploitation statusNot exploited | FixYes | Affected productAddon Elements for Elementor (formerly Elementor Addon Elements) | Published08/30/2024 | SeverityMedium |
|---|
CVE-2024-4401Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters | Exploitation statusNot exploited | FixYes | Affected productAddon Elements for Elementor (formerly Elementor Addon Elements) | Published08/30/2024 | SeverityMedium |
|---|
CVE-2024-5325Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data | Exploitation statusNot exploited | FixYes | Affected productForm Vibes – Database Manager for Forms | Published07/12/2024 | SeverityHigh |
|---|
CVE-2024-4570Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productAddon Elements for Elementor (formerly Elementor Addon Elements) | Published06/27/2024 | SeverityMedium |
|---|
CVE-2024-4569Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productAddon Elements for Elementor (formerly Elementor Addon Elements) | Published06/27/2024 | SeverityMedium |
|---|
CVE-2024-2092Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget | Exploitation statusNot exploited | FixYes | Affected productAddon Elements for Elementor (formerly Elementor Addon Elements) | Published06/12/2024 | SeverityMedium |
|---|
CVE-2024-3743Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productAddon Elements for Elementor (formerly Elementor Addon Elements) | Published05/02/2024 | SeverityMedium |
|---|
CVE-2024-30422WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementor Addon Elements | Published03/28/2024 | SeverityMedium |
|---|
CVE-2024-29107WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementor Addon Elements | Published03/19/2024 | SeverityMedium |
|---|
CVE-2023-51410WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload | Exploitation statusNot exploited | FixYes | Affected productWP Mail Log | Published12/29/2023 | SeverityCritical |
|---|
CVE-2023-3088WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email | Exploitation statusNot exploited | FixYes | Affected productWP Mail Log | Published07/12/2023 | SeverityHigh |
|---|
CVE-2022-45807WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productWP Mail Log | Published02/02/2023 | SeverityMedium |
|---|
33 Results | Page 1 of 1